Tagged software-risk-management